Getting 1E (INTEGRITY_ERROR) on changeKey and changeKeySettings

[Yermek Ibrayev]

Hi guys,

I'm trying to change key and key settings but always getting same error.
List of my commands:

-----Authenticate
Key: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Vector: 00 00 00 00 00 00 00 00
Command: 0A 00
Response: AF 8B 95 99 DC C7 71 F4 DB
RndB: 8B 95 99 DC C7 71 F4 DB
Decrypted RndB:3E 48 AA 0B D6 1F 2E EA
Shifted:48 AA 0B D6 1F 2E EA 3E
RnbA: 5A AC 38 6E 0E 0B 80 F4
RnbAB:5A AC 38 6E 0E 0B 80 F4 48 AA 0B D6 1F 2E EA 3E
Encrypted RndAB:F7 69 E9 95 DF A2 3E A0 5D 5F 47 A9 6A 15 40 AD
Command: AF F7 69 E9 95 DF A2 3E A0 5D 5F 47 A9 6A 15 40 AD
Response: 00 1F 59 B1 E0 AC FC BD 3E
newRnbA:1F 59 B1 E0 AC FC BD 3E
decrypted newRnbA: AC 38 6E 0E 0B 80 F4 5A
Session key: D9 1C AD FD 8D 2A 61 41 DA 5F 54 3C 7C EF 5D 37 D9 1C AD FD 8D 2A 61 41

-----ChangeKeySettings
Key: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Vector: 00 00 00 00 00 00 00 00
Session key: D9 1C AD FD 8D 2A 61 41 DA 5F 54 3C 7C EF 5D 37 D9 1C AD FD 8D 2A 61 41
New Key Setting
Crc: A9 09
Decrypted data: 0F 09 A9 00 00 00 00 00
Encrypted data: 68 31 80 24 AE 26 43 B5
Command: 54 68 31 80 24 AE 26 43 B5
Response: 1E 90 00

-----ChangeKey
Old Key: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Vector: 00 00 00 00 00 00 00 00
New key: 00 10 20 31 40 50 60 70 80 90 A0 B0 B0 A0 90 80
CRC: 89 FF
Cryptogram: 00 10 20 31 40 50 60 70 80 90 A0 B0 B0 A0 90 80 FF 89 00 00 00 00 00 00
CryptogramEcn: 95 6D E0 F8 8F 26 83 96 E6 5D 1C 88 9E 9D EA 89 9E 8D A5 61 19 F7 90 48
Command: C4 00 95 6D E0 F8 8F 26 83 96 E6 5D 1C 88 9E 9D EA 89 9E 8D A5 61 19 F7 90 48
Response: 1E 90 00

I'm hoping on fast help.

Regards

---

+ 0  |  - 0

[TapLinx Support]

Hi Yermek,

I can offer a session log of a MIFARE DESFire EV1 successful authentication and change key command:

phpalI14443p3a_ActivateCard--------ENTRY-------- pUidIn=00  Send to card: 26

Recv from card: 4403

Send to card: 9320

Recv from card: 8804953920

Send to card: 93708804953920

Recv from card: 24

Send to card: 9520

Recv from card: C9922680FD

Send to card: 9570C9922680FD

Recv from card: 20

phpalI14443p3a_ActivateCard--------LEAVE-------- pUidOut=049539C9922680   pSak=20   pMoreCardsAvailable=00   [STATUS = SUCCESS]



phpalI14443p4a_ActivateCard--------ENTRY-------- bFsdi=08   bCid=00   bDri=00   bDsi=00  

Send to card: E080

Recv from card: 067577810280

phpalI14443p4a_ActivateCard--------LEAVE-------- pAts=067577810280   [STATUS = SUCCESS]



phalMfdf_AuthenticateAES--------ENTRY-------- wKeyNo=0004   bKeyNoCard=00   pDivInput=00  

Send to card: AA00



phpalI14443p4_Exchange--------ENTRY-------- wOption=0000   pTxBuffer=AA00

Send to card: 0A00AA00

Recv from card: 0A00AF2199448DEBAB370A0D32358E724AED9C

phpalI14443p4_Exchange--------LEAVE-------- ppRxBuffer=AF2199448DEBAB370A0D32358E724AED9C   [STATUS = SUCCESS]



Recv from card: AF2199448DEBAB370A0D32358E724AED9C

  PICC-to->PCD E(Kx, RNDB): 2199448DEBAB370A0D32358E724AED9C

  Plain RNDB = 94941F6A13C05DE20AF6240814AED6B5

  RNDA = 99E39F520560B7749FCA94D7A169AB38

  Encrypted RndA = 19D83F83014940BEB62AE9E9B2A8181B

  Encrypted RndB' = B67C4ADEEE79D7498F249DD2C7C39EC4

Send to card: AF19D83F83014940BEB62AE9E9B2A8181BB67C4ADEEE79D7498F249DD2C7C39EC4



phpalI14443p4_Exchange--------ENTRY-------- wOption=0000   pTxBuffer=AF19D83F83014940BEB62AE9E9B2A8181BB67C4ADEEE79D7498F249DD2C7C39EC4

Send to card: 0B00AF19D83F83014940BEB62AE9E9B2A8181BB67C4ADEEE79D7498F249DD2C7C39EC4

Recv from card: 0B0000E15D41CE23F33228EE0536A31CB1AC65

phpalI14443p4_Exchange--------LEAVE-------- ppRxBuffer=00E15D41CE23F33228EE0536A31CB1AC65   [STATUS = SUCCESS]



Recv from card: 00E15D41CE23F33228EE0536A31CB1AC65

  PICC-to->PCD E(Kx, RndA'): E15D41CE23F33228EE0536A31CB1AC65

  Plain RNDA' = E39F520560B7749FCA94D7A169AB3899

  Session Key = 99E39F5294941F6AA169AB3814AED6B5

  Session KeyType = 0000

phalMfdf_AuthenticateAES--------LEAVE-------- [STATUS = SUCCESS] AUTHENTICATED 



phalMfdf_ChangeKey--------ENTRY-------- wOption=FFFF   wOldKeyVer=0000   wNewKeyVer=0000   pDivInput=00   wOldKeyNo=0004   wNewKeyNo=0000   bKeyNoCard=80   bDivLen=00  

  IV = 00000000000000000000000000000000

  plain stream(in): plain= 00000000000000000000000000000000008BE9EDB50000000000000000000000

  Encrypted stream(out): enc= 158012878F367295147B777703E53574045EB08FD58F17AED8400B78A9C39A87

Send to card: C480158012878F367295147B777703E53574045EB08FD58F17AED8400B78A9C39A87



phpalI14443p4_Exchange--------ENTRY-------- wOption=0000   pTxBuffer=C480158012878F367295147B777703E53574045EB08FD58F17AED8400B78A9C39A87

Send to card: 0A00C480158012878F367295147B777703E53574045EB08FD58F17AED8400B78A9C39A87

Recv from card: 0A0000

phpalI14443p4_Exchange--------LEAVE-------- ppRxBuffer=00   [STATUS = SUCCESS]



Recv from card: 00

phalMfdf_ChangeKey--------LEAVE-------- [STATUS = SUCCESS]

I hope it helps.

The TapLinx team

---

+ 1  |  - 0

[Author]

Posts